CVE-2021-38372
No fix known EPSS <1%
In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.
Products: kde trojita
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 20.04 LTS | trojita | no fix |
| Ubuntu 22.04 LTS | trojita | no fix |